namespace w4c_workflows.Services.Credentials;

/// <summary>
/// Symmetric protection for credential payloads at rest. Implementations must be
/// authenticated (tamper-evident) and deterministic to store as text.
/// </summary>
public interface ICredentialCipher
{
    string Protect(string plaintext);
    string Unprotect(string ciphertext);
}